src/Security/Voter/PostVoter.php line 11

Open in your IDE?
  1. <?php
  2. namespace App\Security\Voter;
  4. use App\Entity\Post\Post;
  5. use App\Entity\Program\Program;
  6. use App\Entity\Program\ProgramCrewMember;
  7. use App\Entity\User;
  8. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  9. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  11. class PostVoter extends Voter
  12. {
  13.     // these strings are just invented: you can use anything
  14.     const SUSPENDRE = 'suspendre';
  15.     const SHOW_RESULT = 'showResult';
  17.     protected function supports(string $attribute, $subject): bool
  18.     {
  19.         // if the attribute isn't one we support, return false
  20.         if (!in_array($attribute, [self::SUSPENDRE, self::SHOW_RESULT])) {
  21.             return false;
  22.         }
  24.         // only vote on `Post` objects
  25.         if (!$subject instanceof Post) {
  26.             return false;
  27.         }
  29.         return true;
  30.     }
  32.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  33.     {
  34.         $user = $token->getUser();
  36.         if (!$user instanceof User) {
  37.             // the user must be logged in; if not, deny access
  38.             return false;
  39.         }
  41.         // you know $subject is a Post object, thanks to `supports()`
  42.         /** @var Post $post */
  43.         $post = $subject;
  45.         switch ($attribute) {
  46.             case self::SUSPENDRE:
  47.                 return $this->canSuspendre($post, $user);
  48.             case self::SHOW_RESULT:
  49.                 return $this->canShowResult($post, $user);
  50.         }
  52.         throw new \LogicException('This code should not be reached!');
  53.     }
  55.     private function canSuspendre(Post $post, User $user): bool
  56.     {
  57.         if ($post->getMedia()->getCreatedBy() === $user) {
  58.             return true;
  59.         }
  61.         /**
  62.          * @var ProgramCrewMember[] $crews
  63.          */
  64.         $authorized = false;
  65.         if ($post->getProgram()) {
  66.             $crews = $post->getProgram()->getCrews();
  67.             if (sizeof($crews) > 0) {
  68.                 foreach ($crews as $crew) {
  69.                     if (
  70.                         $crew->getUser() === $user &&
  71.                         (
  72.                             $crew->getHasAdminRole() ||
  73.                             $crew->getHasPostPublisherRole()
  74.                         )
  75.                     ) {
  76.                         $authorized = true;
  77.                     }
  78.                 }
  79.             }
  80.         }
  82.         return $authorized;
  83.     }
  85.     private function canShowResult(Post $post, User $user): bool
  86.     {
  87.         if ($post->getMedia()->getCreatedBy() === $user) {
  88.             return true;
  89.         }
  91.         /**
  92.          * @var ProgramCrewMember[] $crews
  93.          */
  94.         $authorized = false;
  95.         if ($post->getProgram()) {
  96.             $crews = $post->getProgram()->getCrews();
  97.             if (sizeof($crews) > 0) {
  98.                 foreach ($crews as $crew) {
  99.                     if (
  100.                         $crew->getUser() === $user &&
  101.                         (
  102.                             $crew->getHasAdminRole() ||
  103.                             $crew->getHasPostPublisherRole()
  104.                         )
  105.                     ) {
  106.                         $authorized = true;
  107.                     }
  108.                 }
  109.             }
  110.         }
  112.         return $authorized;
  113.     }
  114. }